mirror of
https://github.com/onionshare/onionshare.git
synced 2025-01-11 07:19:30 -05:00
added 0.5 to changelog
This commit is contained in:
parent
b946c2f20a
commit
ee560e2d05
10
CHANGELOG.md
10
CHANGELOG.md
@ -1,9 +1,15 @@
|
||||
# OnionShare Changelog
|
||||
|
||||
## 0.5
|
||||
|
||||
* Removed webkit GUI altogether, and refactored GUI with native Qt widget
|
||||
* In Tails, launches separate process as root for Tor control port and firewall stuff, everything else runs as amnesia
|
||||
* Fixed itsdangerous dependency bug in Debian Wheezy and Tails
|
||||
* Guesses content type of file, responds in HTTP header
|
||||
|
||||
## 0.4
|
||||
|
||||
* Fixed critical XSS bug that could deanonymize user
|
||||
https://micahflee.com/2014/07/security-advisory-upgrade-to-onionshare-0-4-immediately/
|
||||
* Fixed critical XSS bug that could deanonymize user: https://micahflee.com/2014/07/security-advisory-upgrade-to-onionshare-0-4-immediately/
|
||||
* Added CSP headers in GUI to prevent any future XSS bugs from working
|
||||
* Hash urandom data before using it, to avoid leaking state of entropy
|
||||
* Constant time compare the slug to avoid timing attacks
|
||||
|
Loading…
Reference in New Issue
Block a user